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[57] ABSTRACT 
A supervisory monitoring and control system is de- 
scribed which provides for responding to a push-button 
telephone output from another location for changing 
operating parameters at the supervised site. In response 
to the received keyed telephone signal the system pro- 
vides complete status of monitor and control ports plus 
any active alarms which have occurred. The foregoing 
information can be communicated by means of a voice 
synthesizer or supplied to a printer or the like. 

4 Claims, 4 Drawing Sheets 
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tern which is accessible via the public telephone net- 
REMOTE SUPERVISORY MONITORING AND work and which can be programmed from a push-but- 
CONTROL SYSTEM ton telephone at any location in a public telephone 

network. 

BACKGROUND OF THE INVENTION 5 It is another object of this invention to provide an 
This invention relates to supervisory monitor control umanned, remote supervisory monitor and control sys- 
systems having particular application to uses in remote tern which permits retrieval of archival data concerning 
locations and which do not require the use of personnel the operation of the system being monitored, 
at that remote location. More particularly, the invention Another object of this invention is to provide a sys- 
relates to systems of the foregoing nature which are 10 tem meeting the foregoing objects and which in addi- 
propmmable, end which can respond to digital or tion to providing voice synthesized outputs concerning 
analog signals to effect both programming and opera- existing condtions, provides a voice synthesized output 
_ t , . containing a menu to guide a user through the operation 

Supervisory control systems of the type here in ques- of the system ^ 
don generally electrically monitor various operation « Anomer object of this invention is to provide means 

ttmn^ for evaluating alarm criteria and to prioritize aS 

in a desired range of parameters is noted, the systems rArkrtrf : nfT k . , . p ^ . 

conventionaJly generate alarms which are then trans- !^f g whlch reduCes false ***** 211(1 nmsance 

mitted to a central location. At the central location, A * k „ . . . . A . . . . . 

there is usually a control center which contains equip- 20 r of this invention is to provide means 

ment capable of displaying the existence of an alarm fo / reportm * alann and status ^formation to a plurality 

and/or various operating parameter levels on com- of users using, synthesized voice and/or printers using 

mand. This control center is, as well t generally data transmission. 

equipped with a control system which can be manipu- SUMMARY OF THE INVENTION 

lated by an operator to correct defects in or nunimize 25 

the effects of malfunctions in the monitored equipment Tl* e foregoing and other objects are obtained in an 
at the remote site. This form of operation has as its unmanned, remote supervisory control system provid- 
ultimate purpose the improvement of performance in an m 8 means f° r responding to a push-button telephone 
unmanned equipment site. In addition, the removal of output for changing operating parameters at the super- 
the necessity for sending a repair crew or operating 30 vised site. The operator need only access the system of 
personnel to the remote site provides a major cost sav- the invention through the use of a valid password to 
Digs- enter new parameters over any push-button telephone. 

In conventional systems the central location is gener- The system contains means for responding to any push- 
ally equipped with a computer having appropriate pe- button telephone anywhere to provide complete status 
ripheral equipment and connected to the remote loca- 35 of monitor and control ports plus active alarms, in addi- 
tion, usually through leased telephone lines. Generally tion to the programming functions described above, 
speaking, the equipment at the remote location is specif- Conventional digital and analog monitoring devices 
ically programmed to operate in a given manner in are used to monitor at a remote site such parameters as 
rwponse to various condition* and to produce corre- signal strengths, temperatures, power, pressure, switch 
sponding signals. In order to effect a change in monitor- 40 closures and the like. These are compared to high/low 
XEe^ * e l em0tC thresholds and normal closure positions to deSmine 

nfth?^^ or perhaps, changes ^arm OTnditions . Snould ^ £ mea sured condition 

wMchexce^ 

through the aforementioned telephone lines. M^t 45 T?"™ f °L^S m "T^J* * "? 
be expected the central control center must be manied T*** to «W to operating person- 

ataUtmiestomsuretheprc^^ nd °L™ «^ e™to»n- When a telephone is an- 

More recent developments in systems of this nature SWe '^ ? onc of locaUons condition is de- 
have permitted such supervisory monitor and control ***** by a s > rnthcsi2ed volce to ^ 
systems to use the telephone dial-up network and a 50 supervisory control system receives a valid password 
standard push-button telephone to communicate with keycd m by user * 

the remote site. These developments include the provi- ^ svstem according to the invention contains 
sion of voice synthesis equipment at the remote site to means for storing data concerning a history of previous 
communicate information to the user, and the operator alarms which is made available to an operator, again 
can use push-buttons on his telephone to produce dual 35 &om ^ push-button telephone, upon receipt of the^- 
tone, multi-frequency (DTMF) signals to enter various appropriate password. Printer means can be provided 
user access codes to set control switches end the like at for Egging every transaction, for example, noting loca- 
the remote she. Again, however, programming of the tion, time, date, port, condition and the operator in- 
monitoring and alarm equipment at the remote site must volved. The printer may be located at the supervised 
still be done at a central location using a computer 60 site and/or two remote locations on any telephone with 
found at that location. Consequently, in the prior art an appropriate modem. 

systems, despite the fact that the remote supervisory rptff hp <sri* narrow np xwrr awtmpc 
system is accessible via a push-button telephone, if er- BRIEF DESCRIPTION OF THE DRAWINGS 
rors in operation should be noted, the system cannot be FIG. 1 is a block diagram of a complete system using 
^programmed from that push-button telephone to 65 the remote supervisory and monitoring system of the 
make the necessary corrections or changes.. invention. 

It is an object of this invention to provide an FIGS. 2A-C are to be taken together and are a de- 
umanned, remote supervisory monitor and control sys- tailed schematic diagram of a preferred embodiment of 



07/31/2003, EAST Version: 1.04.0000 



4,748,654 

3 4 

a remote supervisory system in accordance with the the microprocessor bus 41. The microprocessor exe- 
principles of the invention. cutes a program stored in memory 26 and has configura- 

^ ^ ^ n TTVftrtxT ^« T*fm tion parameters stored in memory 24. Block 24 is ran- 

DETAILED DESCRIPTION OF THE dom access memory (RAM) for storage of various vari- 

DRA WINGS 5 ables and parameters. The remaining devices connected 

FIG. 1 illustrates in diagrammatic form a system to the microprocessor bus are input/output devices and 
arrangement which utilizes the supervisory monitor and are used in this combination to form the supervisory 
control system of the invention. Remote operating site monitor and control system. 

10, at which is located a monitoring and control system A real time clock is used to provide time and date 
12 which is constructed according to the principles of 10 status to the software. It also provides interrupts to the 
the invention, may include any form of equipment microprocessor to initiate sensor scanning. The real 
which requires monitoring of its operating parameters. time clock 22 is implemented in hardware and con- 
In addition, at the remote site is a conventional push- nected to the microprocessor bus. 
button telephone 14 connected to system 12, and a A watchdog timer 32 is used as a safeguard device to 
printer 16 similarly connected to system 12. 15 ensure that the microprocessor 20 is properly executing 

Push-button telephone 18 which is shown to be in the program. The watchdog timer 32 must be serviced 
two-way comunication with system 12 may be any at strict time intervals. If tt is not serviced at strict time 
push-button telephone located anywhere in a public intervals it is indicative of the microprocessor 20 not 
telephone system. As indicated, a user may perform any executing the stored program properly and the watch- 
of four functions from the push-button telephone. After 20 dog timer 32 will reset the microprocessor 20. 
accessing system 12 through the use of a password, an A block of digital input/output ports is shown at 28. 
inquiry may be made as to the status of the various These are connected to the microprocessor 20 via data 
operating parameters and alarm conditions. If desired, bus 41. In this embodiment the block of digital input- 
the operator, again through the transmission of an ap- /output ports 28 interfaces through a standard 50-pin 
propriate code to the system 12, can obtain a recent 25 connector 30 which in this case contains twelve alarm 
maintenance history of the monitored site. This history inputs 31 and four control output 33. 
contains a listing of alarm conditions, including alarm Another device which might be referred to as an- 
port and alarm description, date and time, alarm dura- other input/output device is a speech synthesizer 34 
tion in days, hours* minutes and seconds, along with the which is of conventional construction. In accordance 
>. operator's identity number and site identification. If it is 30 with known programming principles the microproces- 
found that the monitored equipment is operating im- sor 20 commands speech synthesizer 34 to produce 
properly or other forms of operation or parameter various words and to form them into recognizable sen- 
changes are needed, system 12 may be programed from tences. The vocabulary for speech synthesizer 34 is 
the push-button telephone to achieve the desired opera- contained in a read-only memory 36. As is shown, the 
tion. Finally, should an alarm condition be noted, cer- 35 output of the speech synthesizer 34 is an analog signal 
tain controls at the remote site can be set, either by having some energy in a frequency band which may not 
comunicatmg DTMF signals from the push-button tele- be accommodated by the telephone system. Accord- 
phone to system 12 which in turn makes the appropriate ingly, a filter 38 may be provided, as needed, to limit the 
switch settings to carry-out the control function or by speech synthesizer 34 analog output to the frequency 
automatic mode. In automatic mode the alarm condi- 40 band width of the telephone system to which system 12 
tion is programmed to set certain controls without oper- is connected. 

ator intervention. A dual tone, multi-frequency (DTMF) transceiver 40 

A plurality of telephones 20 are additionally shown in of known construction is provided. In this example it is 
FIG. 1. Should system 12 note an alarm condition, it constructed from a type 20C90 chip, as manufactured 
can be programed to call in sequence, in this example, 45 by Silicon Systems Inc. The receiver portion of the 
up to six telephones at any six locations to attempt to element 40 receives dual tone, multi-frequency signals 
reach a user who can take the appropriate steps to cor- from a push-button telephone anywhere in the tele- 
rect the condition, when one of the users is reached, as phone network to receive various commands to cause 
discussed above, he may request additional diagnostic the system to perform the various functions described 
information by simply using the telephone keypad. The 50 hereinabove in connection with FIG. 1. As will be 
user may also direct a control function to initiate remote discussed, the user might be provided with a command 
testing and to switch to standby equipment. menu which will guide him in providing the appropriate 

Every transaction may be logged on printer 16(a) at comands. The transmitter portion of element 40 permits 
the equipment site, and at the same time transmitted to dialing through the public telephone network. Trans- 
printers 16(b) and 16(c) at any other locations with a 55 ceiver 40 also includes a call progress monitor which is 
telephone. Logged information includes, for example, used in the dialing process to detect the various states 
time to the nearest second, site identification, alarm port during a call such as a dial tone, busy, ring back and the 
and activity description, date and the individual in- like. If, for example, a busy tone is detected the micro- 
volved in the operations. processor 20 will detect it, and the call will be placed 

In FIG. 2 is shown a detailed schematic diagram of a 60 later. When a dial tone is detected, element 40 dials and 
preferred form of construction of system 12. then waits for ring back or a busy signal. The call 

The entirety of the operations of system 12 are moni- progress monitor also detects the absence of ring back, 
tored and controlled by means of a conventional micro- i.e., the operator answering the telephone, 
processor 20 which in this example is a NSC800 chip Another input/output block connected to micro- 
manufactured by National Semiconductor Corporation. 65 processor bus 41 is a universal asynchronous receiver 
The microprocessor 20 in conjunction with memory transmitter (UART) 42 of conventional construction; in 
and input/output devices form the hardware of the this example it is 7 a type NSC 858 chip manufactured 
invention. The devices are all connected together by by National Semiconductor Corporation. As is known, 
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this device is used for transmitting serial data. It is a check or system check has, as detected by microproces- 
smgle channel UART with a baud rate generator on the sor 20 ( determined the existence of an error or defect in 
chip. As shown, element 42 connects to a level con- system 12 itself. 

verter 44> which converts the signals to a level compati- The busy indicator in switching block 54 indicates 
^ ™£ a standard EIA/RS232 signal output at 5 that system 12 is off hook, either communicating locally 
EIA/RS232 interface 46. UART 42 also is directly through an operator or remotely through the telephone 
connected to a conventional modem 4*. This modem network. The audible alarm portion in switching block 
serves to transmit bit serial data from UART 42 through 54b used by system 12 to alert a local operator, if one 
the telephone line 43. is present, to pick up the telephone set at the remote site 

As illustrated, speech synthesizer 34, DTMF trans- 10 in the local mode, 
ceiver 40 and modem 48 each have analog outputs, and The last remaining input/output block connected to 
are ultimately coupled to the public switched telephone microprocessor 20 by date bus 41 is the analog-to-digital 
network connected to by lines 43. The input/output converter 58. This chip is a type ADC0809 manufac- 
ports of the foregoing components are connected, re- tured by National Semiconductor Corporation. It con- 
specnvely, to a conventional hybrid circuit block 50. As 15 tains a multiplexer for selecting 1 of 8 analog inputs, and 
is shown, a hybrid, such as element 50, is used to con- conversion is carried out by the successive approxima- 
vert a standard two-wire interface from the public tele- tion technique. In this embodiment the digital output 
phone network to a transmit and receive path. In this from the converter is eight (8) bits in width. Its function 
case the transmit path is from the hybrid to the tele- is to receive analog signals from various sensors at the 
phone network- This path comprises the output from 20 remote site end convert them into digital information 
speech synthesizer 34 and its filter 38, the output of for use by microprocessor 20. 
modem 48 end the output from DTMF transceiver 40. Input No. 1 to converter 58 receives voltage from a 
The receive output of the hybrid 50 provides the inputs battery 60 through battery test relay 6Z Coil 63 of bat- 
to the modem 48 and the DTMF transceiver 40. These tery test relay 62 is periodically energized from a signal 
inputs end outputs are coupled through the hybrid 50, 25 received over microprocessor bus 41 from microproces- 
are converted in the known manner, end sent to a data sor 20. The test relay operates to periodically test the 
access arrangement This data access arrangement stateofchargeofsystembattery60.Inputs2,3,4and5 
(DAA) 52 is a known device required in the United to converter 58 are from circuit block 66 which is in 
States by the Federal Communications Commission to turn connected to analog sensors (a), (b), (c) and (d) 
comply with a rule known as FCC part No. 68 for 30 These sensors, for example, are, respectively, the appnv 
connections to public switched telephone networks. In priate types to detect such parameters as voltage, pres- 
essence, this element provides isolation to protect the sure, speed, chemical content or the like. This analog 
telephone network from any electrical eccentricities of information is then communicated to converter 58, 
system 12. converted to the appropriate digital information end 

Control signals to the DAA 52 effect off-hook con- 35 communicated vie bus 41 to microprocessor 20 
tool, and with this control the microprocessor 20 can Inputs #6 and #7 to the converter 58 are' analog 
connect the system (12) to the DTMF for dialing or voltages representing the temperatures sensed by sen- 
answering calls. Control signals from DAA block 52 sors 90A and 90B. Hie signals from the sensors are 
are the nng detect and line current signals. The line conditioned by the amplifiers and level shifters #22 
current detect indicates that either system 12 or the 40 This must be doneHo make these signals usable by the 
local telephone set are off hook. The ring detect signal converter. 

indicates that the public network is ringing system 12, A test voltage generator 68 is provided on output #8 
by smiply ringing its telephone number. and is used to test the calibration of the converter 58 r 

I he data access arrangement (DAA) 52 can be con- under the control of microprocessor 20. 
trolled by a switch identified as a local/normal control 45 The power supply components for system 12 supply 
m switching block 54. This switch performs the func- normal power from a flyback converter 80 plus an unin- 
toon of switching the local telephone set (not shown) terruptable power from a 5-volt linear regulator signal 
from the switched network. which is labelled as +5 VA. The 5-volt linear regulator 

It can be said that switching block 54 is an interface 78 supplies power to configuration memory 24, which is 
between system 12 and a human operator. At this point 50 a non-volatile memory block. Similarly, it supplies 
the operator can interact locally with system 12. The power to the real time clock 22, and the power sequenc- 
iocal and normal indicators in switching block 54 indi- ing circuit 86 which must receive power at all times 
cate system 12 is in the local mode in connecting a local The power for the system 12 is provided from the 
telephone set and system 12. In the normal mode com- alternating current mains by means of a wall-mount 
mumcations flow between the remote location which 55 transformer 70. The output of this transformer proceeds 
system 12 is monitoring end the public telephone net- through a rectifier 72 end filter capacitor 74. The recti- 
work. The local-normal toggle switch in switching fied and filtered direct current produced is coupled 
block 54 is used to place a system 12 either on the public through a set of isolation diodes 76 to supply current to 
network or directly connected to the local telephone. A a 5-volt lineer regulator 78 of conventional construction 
transfer request to this switch is used when the local 60 and a flyback DC-DC converter 80. The various 
°P^ or P* 4 * 8 U P the ringing phone to form a system 12 sources of power at the illustrated voltages emanate 
call. The local operator may push the transfer switch in from the latter two components, 
switching block 24 and hang-up his phone to put system A battery charger 82 charges battery 60 and main- 
12 in contact with the remote caller. tains a constant voltage on the battery in the known 

The alarm indicator m switching block 54 will blink if 65 manner. Power relay 84 controls flyback DC-DC con- 
there is an unacknowledged alarm. It will be on for an verter 80, and is used to deactivate system 12 in case of 
acknowledged alarm end off if no alarm is present The a prolonged power outage. In the event of a power 
alarm indicator is also used to indicate that the self- outage, after system 12 has performed all its alarm and 



07/31/2003, EAST Version: 1.04.0000 



4,748, 

7 

togging functions the system will deactivate itself by 
cutting off power to the DC-DC converter 80. If the 
flyback DC-DC converter 80 is disabled, the 5-volt 
linear regulator 78 which provides nonvolatile power 
will not be disabled. Flyback DC-DC converter 80 can 5 
be formed from any of a variety of known circuit de- 
vices, e.g., a Lambda type Las 6320 controlled circuit. 
It performs a switching function at a rate of thousands 
of times per second to perform pulse width modulation. 
A flyback converter of this type is characterized in that 10 
its output power is derived from inductively stored 
energy and is transferred when the transistor switch is 
turned off. 

Power relay 84 disables the flyback DC-DC con- 
verter 80 and is controlled by power sequencer 86 15 
which is in turn under the control of microprocessor 20. 
This device performs the function, when necessary, of 
cutting off power to flyback DC-DC converter 80 and 
to restart the system when alternating current power is 
reapplied. It also performs "write protect" for nonvola- 20 
tile memory. As well, it protects random access mem- 
ory 24 during power outage and during reset. Power 
sequencer 86 is formed by a logic circuit which com- 
pares power conditions to produce the desired result. 

A power failure detection end status circuit 88 pro- 25 
vides detection of intermittent AC power. The same 
circuit also detects when the power is reapplied. The 
detection of an intermittent outage is performed by a 
latch and must be cleared by the microprocessor 20. 
The power failure and status circuit includes logic com- 30 
ponents of a conventional nature whiuh detect the pres- 
ence or absence of A.C. power to provide outputs indic- 
ative of power status. 

Using conventional programming techniques a pri- 
mary function of system 12 is to continuously monitor 35 
the status of user equipment at the remote site in order 
to detect and act upon the presence of fault conditions. 
This is done by sampling digital and analog input signals 
received through converter 58 and comparing the re- 
sults with programmed criteria. In addition, system 12 40 
continuously monitors its own environment indicating 
parameters such as temperature and power availability. 

All faults that are detected by the status monitoring 
facility are subjected to a screening process that deter- 
mines whether or not the fault is to be reported to an 45 
operator. This screening process, referred to herein as 
alarm management, is discussed hereinabove. 

The system of the invention can monitor the status of 
any user equipment providing either form "C" or form 
"A" alarm outputs. In this embodiment up to 12 such 50 
signals are supported by a single system 12. 

The input signals are referred to as signals 1 through 
12 appeering at 50-pin connector 30. The type and sig- 
nificance of each input signal are determined by the user 
at any time through programming. The correlation 55 
between an input signal and user equipment is transpar- 
ent to the inventive system. 

The system of the invention is capable in the known 
manner of detecting and acting upon transitions in the 
state of each individual digital input signal. The system 60 
periodically scans the input signals to sense any two 
consecutive changes in state. Unused signals are not 
scanned. 

The system of the invention can monitor up to, in the 
preferred embodiment, four user-supplied analog sig- 65 
nals. These signals are fed through the system using 
conventional BNC connectors mounted on the rear 
panel. The significance of these levels is determined by 



the user at any time through programming. The correla- 
tion between a connector and a particular signal path 
(e.g., transmit or receive) is transparent to the system. 

The system periodically converts the analog signals 
to digital values in the range of 0 to 150, and unused 
analog inputs are not scanned. 

On a per signal basis the user can specify a range of 
normal values. Values that are above or below the 
range for two consecutive scans are considered to indi- 
cate a fault condition. A fault condition is considered to 
be cleared only after the signal has returned to and 
stayed in the normal range for two consecutive scans. If 
desired, these transitions into and out of fault conditions 
can be logged on a printer such as printer 16. Each 
analog input signal can be associated with a correspond- 
ing control output signal such that the presence or ab- 
sence of a fault on the input signal determines the state 
of the output port. The system can be interrogated for 
the current value of each analog signal, and the value 
reported shall be the last sampled value. 

Temperature sensors 90(a) and 90(6) are provided as 
a feature of the system. The significance of these sensors 
is determined by the user at any time through program- 
ming. The user may specify a normal range for each 
temperature sensor, and temperature readings above or 
below the normal range for two consecutive scans con- 
stitute a fault condition. Similarly, a temperature fault is 
cleared when the temperature returns to and stays in the 
normal range for two consecutive scans. 

The system of the invention utilizing real clock 22 
mfiintAmfi an on-board clock and calendar. The date and 
time can be set as often as desired as part of the pro- 
gramming function. The system can be queried for the 
date and time as part of the status reporting function. 

As result of the aforementioned status monitoring, 
the system of the invention may detect any or all of the 
following faults: 

A. Temperature (from the temperature sensors too 
high or too low); 

B. AC power loss; 

C. System test failures such as weak battery, conver- 
sion error, printer off-line or nonfunctioning nonvola- 
tile memory failure and tone generation decoding fail- 
ure; 

D. Digital input signals 1 through 12 including in- 
valid form C, fault condition or disconnection; and, 

£. Analog input signals a through d as either too high 
or too low. 

Each fault that occurs is subjected to a screening 
process through conventional programming of micro- 
processor 20 which determines whether or not the fault 
is to be automatically reported fo an operator. It should 
be noted that it is not possible to screen out power 
failure faults or self-test failures. For each monitor point 
the user programs, (a) whether or not a fault condition 
on this monitor point is ever to be reported and (b) how 
long the fault condition must be present before it is 
reported to an operator. A fault condition present for 
the minimum specified duration is considered to be an 
alarm condition. 

An alarm is considered to be active as long as the 
fault condition on the monitor point remains. 

When an alarm condition occurs, the system of the 
invention automatically dials a programmed telephone 
number, or numbers, identifies itself to the operator and 
reports significant information using voice synthesis. 

In accordance with its principles of operation the 
system of the invention requires that each alarm be 
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acknowledged by an operator using the telephone key- in effect until the unit is programmed otherwise, 
pad. It will continue to dial a primary and up to a given Changes in programmable parameters may be logged 
number of telephone numbers until the alarm is ac- on a printer. 

knowiedged or all phone numbers have been tried a As a result of the aforementioned programming func- 
specified number of times. Unsuccessful reporting of an 5 tion, the system of the invention may be programmed 
alarm is noted by the system end is logged on the with any or all of the following paremeters: 
printer. The log entry includes the identification num- (a) System Identification (identifies the individual 
ber of the responding operator. Operators can receive unit to the operator using synthesized voice and prints 
alarms without acknowledging them. In such a case the the identification on the printer); 
system continues to dial alternate numbers until the 10 (b) Printer Paremeters (sets printer control, i.e., su- 
alarm is acknowledged or the retry count is exhausted. peirvised site or remote, disable/enable and telephone 

When the detection of a single alarm triggers an out- numbers of remote printers); 
going call, the bus status monitoring is not suspended. (c) Passwords (operator passwords and the operators 
Thus, by the time an operator is reached, there may be to which they were assigned and programmer pass- 
more then one alarm to be reported. Conversely, the 15 words and the programmers to which they were de- 
fault condition that generated the alarm may have al* signed); 

ready been corrected. For this reason, the occurrence (d) Telephone Paremeters (the telephone numbers to 
of an alarm condition is recorded in a time ordered be called in case of an alarm and the sequence they are 
manner. In its random access memory the system main- to be called, the type of telephone, i.e., pulse or tone, the 
tains information about an alarm condition as long as 20 number of auto-dial retries in case of an uncompleted 
the alarm condition is still active and has not been ac- call, and the number of rings before system 12 auto- 
knowiedged, or it is one of the last ten past alarms. Past answers); 

alarms are presumed to have been both cleared and (e) Digital Alarm input Paremeters (enable/disable 
acknowledged. At least ten unacknowledged alarms the port and/or alarm, set type, Le., from "A" or "C", 
shall be maintained in memory. 25 set normally open or closed, and duration in seconds 

When dialing out, the system of the invention shall before making alarm phone call); 
automatically report all unacknowledged alarms (f) Analog/Temperature input Paremeters (enable/- 
whether or not they are currently active. The last ten disable the port and/or alarm, set type, i.e., "A" or "C", 
past alarms can be obtained through the status reporting set high and low thresholds, and the duration in seconds 
function. The same is true of active alarms that have 30 before making alarm phone call); 
already been acknowledged. (g) Control Output Parameters (enable/disable, set 

In the preferred embodiment the alarm records in- user control or automatic, and normally open/closed); 
elude the following information: (a) monitor point, (b) (h) Setting Date and Time; and 
alarm condition, (c) date and time of detection, (d) date (i) Enable/Disable Autodial, 
and time cleared (if cleared) (e) the identity of acknowl- 35 Calls to the system 13 of the invention can be initiated 
edging operator (if acknowledged) and (f) site identifi- from any telephone. The call begins with a known 
catioiL . "hand shaking" protocol. The system uses voice synthe- 

Status is reported to operators upon demand. Status sis to announce its identification and to request a pass- 
reports can be selected individually for each of the word. The identification number is specified by the 
following: (a) date and time, (b) temperature readings, 40 user, and up to ten digits may be specified. After this 
(c) active alarms, (d) alarm history for the past ten introduction the system controls progress of the call by 
alarms, (e) individual digital input states, (f) individual prompting for input and processing DTMF tones ac- 
analog input values, (g) individual digital output states, cording to its current state. The operator is given suffi- 
(h) battery charge, and 0) system test. cient flexibility to choose the order in which actions are 

An operator can obtain status by dialing the system 45 taken; status queries, equipment control and program- 
and , identifying himself using a "password". Status ming commands can be utilized in any order, 
queries can also be made if the system dialsthe operator, The system will remain off hook until the operator 
in which case the operator is given a choice after all explicitly releases control or until two minutes have 
unacknowledged alarms have been reported. The status elapsed since the last operator response. The operator is 
reporting function allows, the operator to monitor 50 warned before the call is disconnected, 
equipment after an alarm has been reported. It also The system of the invention can dial out using either 
allows the operator to check the status of input signals tone or pulse codes. The mode may be set at any time by 
that are not configured to generate alarms. Such signals prograinming, The system maintains a directory of tele- 
may be ones that have significance only in diagnostic phone numbers in the memory and these numbers are 
modes ; 55 specified by the user and can be changed as often as 

An important function of the system of the invention desired, 
is the programming function. That is, according to the On out-going calls the system 12 dials the number and 
principles of the invention the system can be pro- uses call progress monitoring to detect when the called 
grammed to meet specific requirements for each instal- phone goes off hook. If the line has not gone off hook 
lation. This can be done by authorized users as often as 60 after a specified time, the system 12 hangs up and dials 
desired from a telephone keypad at any location. As another number if the user-specified retry count has not 
with other functions, authorization to change system expired. 

parameters is controlled via a programmer password. The system also uses its auto dial capabilities to send 
The system's microprocessor 20 controls a voice syn- information to a remote printer. The telephone number 
thesizer 34 to report the current programming parame- 65 of each remote printer is specified to the system 12 by 
ters and to prompt new input Validity checks are per- the user. 

formed on operator responses. For all programmable Using call progress monitoring the system can detect 
parameters default values are predetermined and will be incoming calls and go off hook after a user-specified 
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number of rings. Upon receiving an in-coming call the 
system identifies itself and prompts the operator to do 
the same. An operator that provides either a valid oper- 
ator password or the programmer's password is allowed 
to issue commands and acknowledge alarms. An opera- 
tor that gives the generic operator responses is only 
allowed to hear unacknowledged alarms. 

Using a predetermined vocabulary through speech 
synthesizer 34, the system synthesizes voice in order to 
identify itself, report status, report alarms, and prompt 
the operator for DTMF inputs. Voice is used only for 
calls to the operators. It is not used to send information 
to the printer. 

The system is capable of decoding all 16 DTMF 
tones in the known manner, and these tones are inter- 
preted according to the current state of the call in 
progress. DTMF tones are accepted on both auto an- 
swer and auto dial calls. They are genereted by the 
operator to query for status, program the system and 
control the output ports. 

The system can detect DTMF tones any time during 
an off hook condition. Depending on its current state, it 
may or may not defer processing of the tone until it has 
completed its current speech output 

Using conventional programming techniques, access 
to information and control capabilities of the system are 
secured by operator passwords. Upon dial out or an- 
swering a call the system will identify itself and request 
the operator to do the same, and the system 12 will 
disconnect if no valid response is entered within, in this 
case, two minutes. 

In the preferred embodiment there are three levels of 
privilege. 

(1) If no operator password is specified, the system 
will provide only the list of unacknowledged alarms. It 
will not consider the alarms to be acknowledged. Any 
logged events requiring operator identification will use 
the number 0 to identify a respondent who did not 
provide a password. 

(2) If a confidential operator password is entered the 
operator will be able to acknowledge alarms, control 
equipment and obtain status. Each system of the inven- 
tion can be programmed to recognize a predetermined 
number of operator passwords. These passwords 45 
uniquely identify an operator. 

(3) Tne highest privilege level is that of a program- 
mer. A single programmer password can be specified 
for each system unit A respondent that enters the pro- 
grammer password will be allowed to change parame- 
ters as well as obtain status, acknowledge alarms and 
control equipment. It should be noted that all passwords 
are programmable, and only a respondent using the 
programmer password can change any of the pass- 
words. 

As indicated in the drawings, the system may com- 
municate with a printer locally attached via serial inter- 
face and/or with up to two remote printers. In the case 
of a remote printer the system dials the number of a 
printer with an auto-answer modem and reports infor- 60 
mation using standard modem tones. As the system is 
programmed, log printer entries are generated for the 
following events: (a) fault detection, (b) fault clearing, 
(c) alarm condition, (d) alarm clearing, (e) equipment 
control, (0 program parameter change, and (g) auto dial 
enabled/disabled. 

If log entries occur at a faster rate than they can be 
printed, up to a maximum of twenty (20) events will be 
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buffered. All logged events will include a time stamp to 
the nearest second of when they occurred. 

It is to be understood that the specific construction 
and principles of operation of the system described 
hereinabove are considered only to be examplary of the 
principles of the invention. It is to be understood as well 
that a variety of modifications and changes in the de- 
scribed system can be used while remaining within the 
scope of the invention as defined in the appended 
claims. 

What is claimed is: 

1. Apparatus which monitors and controls equipment 
at a remote site, said apparatus comprising:: 

monitorinq means for sensing conditions at a plurality 
of monitored points in equipment at a remote site 
and for producing data signals representing the 
sensed conditions; 

programmable microprocessor means for controlling 
the operations of said apparatus in an operator-con- 
trolled mode and in an automatic mode, for receiv- 
ing and storing data signals of said monitoring 
means, for producing alarm signals representing 
alarm conditions when the data signals of said mon- 
itoring means reach predetermimed values, and 
having output ports connected to circuits for con- 
trolling output parameters and carrying out equip- 
ment control functions to correct the alarm condi- 
tions; 

transmitting means coupled to a public telephone 
net-work for producing and transmitting thereover 
a predetermined sequence of dual tone multi-fre- 
quency (DTMF) signals responsive to receipt of an 
alarm signal from said microprocessor means; 

voice synthesizer means operable responsive to the 
alarm signal and an off hook condition of a tele- 
phone connected to the public telephone network 
for producing and transmitting over the telephone 
network an oral announcement of an alarm condi- 
tion corresponding with an alarm signal; 

receiving means for receiving DTMF signals pro- 
duced by an operator of the off hook telephone, 
said apparatus having multiple privilege levels in- 
cluding an operator privilege level established 
when DTMF siqnals coupled though said receiv- 
ing means are in the form of a prescribed operator 
privilege code and a programmer privilege level 
established when DMTF signals coupled through 
said receiving means are in the form of a prescribed 
programmer privilege code, and said apparatus 
having a different response to received DTMF 
siqnals depending on which privilege level is estab- 
lished in the apparatus; 

said microprocessor means includinq means for com- 
municating data signals and alarm signals to said 
voice synthesizer means, said voice synthesizer 
means, responsive thereto, producing and transmit- 
tinq over die public telephone network to an opera- 
tor of the off hook telephone an oral announcement 
of the sensed equipment conditions including status 
reports of predetermined sensors and alarm condi- 
tions; 

said microprocessor means including means, operable 
when said apparatus is in the operator-controlled 
mode and after the operator privilege level has 
been established, for receivinq subsequently trans- 
mitted DTMF signals representing desired states of 
said output ports of said microprocessor means and 
circuits connected thereto, and for setting said 
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output ports of said microprocessor means and 
circuits connected thereto hi the desired states to 
control output parameters and carry out equipment 
control functions in accordance with the contents 
of the subsequently transmitted DTMF signals; 5 
programmable memory means in said microprocessor 
means for storing instructions and parameters for 
operation of said microprocessor means in both the 
operator-controlled mode and the automatic mode, 
instructions stored in said memory means compris- 10 
ing programs used by said microprocessor means 
in both the operator-controlled mode and the 
automatic mode to monitor the status of equip- 
ment at the site, to detect alarm conditions based 
upon a comparison of the data signals produced 15 
by said monitoring means with the predeter- 
mined values, the predetermined values compris- 
ing input parameters stored in said memory 
means, and to generate alarm signals if the com- 
parison detects alarm conditions; 20 
instructions stored in said memory means also com- 
prising programs used by said microprocessor 
means in the operator-controlled mode to set 
said output ports to control output parameters 
and carry out equipment control functions re- 25 
sponsive to DTMF signals produced by the op- 
erator of the off hook telephone; 
instructions in said memory means also comprising 
programs used by said microprocessor means in 
the automatic mode without operator interven- 30 
tion to set said output ports to control output 
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parameters and carry out equipment control 
functions responsive to an alarm condition; 
said microprocessor means including means operable 
after a programmer privilege level is established in 
said apparatus, for receiving subsequently transmit- 
ted DTMF signals to set said apparatus in either 
the automatic or operator-controlled modes and, 
when representing modifications to or changes in 
instructions and input and output parameters in- 
cluding privilege level codes, to reprogram said 
memory means in accordance with the contents of 
the last-mentioned subsequently transmitted 
DTMF signals. 

2. An apparatus according to claim 1 wherein said 
microprocessor means is programmed to detect opera- 
tor-generated incoming DTMF signals at any time dur- 
ing an off-hook condition and to process the incoming 
signals to reprogram said memory means while the 
apparatus is performing its monitoring and control op- 
erations. 

3. An apparatus according to claim 1 wherein said 
microprocessor means is programmed to perform valid- 
ity checks on operator-generated incoming DTMF 
signals. 

4. An apparatus according to claim 1 wherein said 
microprocessor means is programmed to detect opera- 
tor-generated incoming DTMF signals and to process 
the incoming signals to initiate remote testing of the 
apparatus. 
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